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@ In a system and method for comparing and matching 
non-predictabte codes generated by separate computers on 
the basis of dynamic variables defined according to time, an 
apparatus and method for synchronizing the time definition 
of the dynamic variables by (a) calculating a first non- 
predictable code according to a secret predetermined algo- 
rithm, the algorithm generating the first non-predictable code 
on the basis of a first dynamic variable and a unique static 
variable; (b) automatically defining the first dynamic accord- 
ing to a first interval in which the static variable is input into 
the algorithm, the first interval of time having a prede- 
termined duration; (c) calculating two or more second non- 
predictable codes according to the predetermined algorithm, 
the algorithm generating the second non-predictable codes 
on the basis of the two or more second dynamic variables 
and the unique static variable, (d) automatically defining the 
two or more second dynamic variables according to two or 
more cells of a second interval of time in which the static 
variable is input into the algorithm of the second computer, 
the second interval of time comprising a central cell of time 
having a predetermined duration and one or more cells of 
time bordering the central cell of time, each bordering cell of 
time having a predetermined duration; (e) comparing the first 
non-predirtable code with the second non-predictable codes 
to determine a match, and (f) automatically synchronizing the 



clock mechanisms which define the first and second dynamic 
variables upon comparison and matching of the first non- 
predictable code with one of the second non-predictable 
codes. 
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MEraOD AND APPARATUS FOR SYNCHRONIZIl^G GENE3RAnON OF SEPARATEr FREE 

RmWING, TIME DEPENDE2W EQOIPWQW 

5 . • - . 

BACKC30aND OP THE INVEKTIGN 

Hie present invention relates to an apparatus and method 
for the electronic generation of variable^ non-predictable codes 
and the validation and comparison of such codes for tS^^purpose of 
positively identifying an authorized individual or user of an 
apparatus or system and thereafter giving clearance to carry out a 
privileged transaction or access to a protected system or facility. 

There often arises a need to prevent all but selected 
authorized persons from being able to carry out some defined 

15 transaction (such as granting of credit) or to gain access to 
electronic equipment or other system/ facility or data (hereinafter 
"clearance or access")* Prior methods for prevaiting linauthorized 
clearance or access typically involve devices which limit access to 
the subject data, facility, or transaction to those who possess a 

20 unique physical device, such as a key or who know a fixed or 
predictable (hereinafter "fixed") secret code. The problem inherit 
in, relying on a fixed code or unique physical device as the means 
to gain such selective clearance" or access" is that wduld-be un- 
authorized users need only obtedn possession of the fixed code or 



COPY 
AS FILED 



2 



2^ 0234100 

unique device to gain sudi clearance or access. Typical instances 
of fixed codes include card numbers, user numbers or passwords 
issued to customers of computer data retrieval services. 

The principal object of the invention is to synchronize 
the generation of time-dependent non-predictable codes which are 
independently generated on the basis of date and time information _ 
which are generated on separate devices which over time may deviate 
out of time synchrony with each other. A further object of the 
invention is to provide a practical approach to generating idenU- 
f ication codes which are unique to the user and which diange peri- 
odically without user intervention but which provide a readily 
verifiable means of identification for providii^ clearance or ac- 
cess at any time. 

SOtrSfiES OP TBE HWEREKM 
rtie present invention eUminates the relatively easy ac- 
cess afforded to someone who copies or otherwise misappropriates a 
secret "fixed" code by periodically generating identification codes 
by using fixed codes, variable data, and a predetermined algorithm 
which is unknown in advance ai^ unknowable outside the administra- 
tion of the security system even to authorised users of the appara- 
tus utilizing the fixed secret code. Ihe predetermined algorithm 
constantly generates new unique and verifiable non-predictable 
codes, which are derived from the fixed data and at least one 
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dynamic variable, such as the time of day (including the date) by 
the predetermined algorithm. The constant changes in the dynamic 
variables when processed by the algorithm results in the generation 
of constantly changing non-predictable t»des. 
5 In accordance with the invention, in a system for com- 

paring and matching non-predictable codes generated by separate 
computers on the basis of dynamic variables defined by separate 
clock mechanisms according to time, there is provided an apparatus 
for synchronizing the time definition of the dynamic variables 
10 comprising: a first computer for calculating a first non-predict- 
able code according to a predetermined algorithm, the algorithm 
generating the first non-predictable code on the basis of a first 
dynamic variable and a unique static variable; a first clock 
mechanism for automatically defining the first dynamic variable 
15 according to a first interval of time in which the static variable 
is input into the algorithm, the first interval of time having a 
first predetermined duration; a second computer for calculating two 
or more second non-predictable codes according to the predetermined 
algorithm, the algorithm generating the second non-predictable 
20 codes on the basis of the two or more second dynamic variables and 
the unique static variable; a second clock mechanism for automati- 
cally defining the two or more second dynamic variables according 
to two or more cells of a second interval of time in which the 
static variable is input into the algorithm of the second computer. 
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the second interval of time comprising a central cell of time 
having a predetermined duration and one or more cells of time 
bordering the central cell of time, each bordering cell of time 
having a predetermined duration; a mechanism for comparing the 
first non-predictable code with the second non-predictable codes to 
determine a match; and, a mechanism for automatically synchronizing 
the first clock mechanism and the second clock mechanism upon 
comparison and matching of the first non-predictable code with one 
of the secord non-predictable codes. " 
.0 The central cell of time typically comprises the date and 

the minute in which the unique static variable is input into the 
second computer as defined by the second clock mechanism; and the 
bordering cells of time may comprise a cell of time comprising the 
date and the minute immediately preceding the central- cell. 
15 Preferably the medianism for synchronizing comprises: a 

counting meciianism for counting the difference in time between a 
central cell of time and a bordering cell of time from which a 
matching second non-predictable code may be generated; a summing 
medianism connected to the counting mechanism for summing succes- 
10 Eive differences in time counted by the counting mechanism; a 
storage mechanism connected to the summing mechanism for storing 
the output of the summing mechanism; and, a shifting mechanism 
connected to the storage mechanism for shifting a central cell and 
bordering cells of time by the output of the summing mechanism 
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stored in the storage mechanism. 

The bordering cells of time may comprise a selected number 
of cells of time immediately preceding the central cell and a 
selected number of cells of time immediately following the central 
cell; and the central and bordering cells of time are typically 
selected to be one minute in duration. 

Preferably, the mechanism for synchronizing further com- 
prises: a second storage mechanism connected to the comparison 
mechanism for storing the date of the most recent coSiparison and 
matching by the comparison mechanism; a second counting mechanism 
connected to the second storage mechanism for counting the dif- 
ference in time between the date stored and the date of present 
entry into the second computer; a dividing mechanism connected to 
the second counting mechanism for dividing the difference in time 
15 counted by the second counting mechanism by a selected value and 
prescribing the output as a first window opening number; a window 
opening mechanism connected to the dividing mechanism and the 
comparison mechanism for calculating as many extra second non- 
predictable codes on the basis of as many extra bordering cells of 
time immediately preceding and following the selected number of 
bordering cells as prescribed by the first window opening number. 

Most preferably, the mechanism for syndironizing further 
comprises: a sensing mechanism connected to the second clock 
mechanism for sensing a re-setting of the second clock mechanism; a 
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third storage mechaniBm connected to the sensing mechanism pre- 
scribing and storing the occurrence of a sensed re-setting of the 
second clock mechanism as a selected second window opening number; 
and, a second window opening mechanism connected to the third 
storage mechanism for calculating as many additional second norr- 
predictable codes on the basis of as many additional bordering 
cells of time immediately preceding and following the extra bor- 
dering cells of time as prescribed by the second window opening 
nuniaer. ".^ 

The first computer typically comprises a microprocessor 
wherein the algorithm is stored in volatile dynamic memory encapsu- 
lated with an energizing mechanism which when interrupted destroys 
all data including at least the algorithm and the static variable. 

Host preferably, the algorithm of the second computer is 
stored in volatile dynamic memory encapsulated with an energizing 
mechanism which when interrupted destroys all data including ait 
least the eJLgorithm and the static variable. 

In a method for comparing non-predictable codes generated 
by separate computers on the basis of dynamic variables defined by 
separate clock medianisms according to time wherein the codes match 
when the dynamic variables match, there is also provided a method 
for synchronizing the time definition of the dynamic variables 
comprising the steps of: inputting a static variable into a first 
computer including a predetermined algorithm; employing the algo- 
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rithm of the first computer to calculate a first non-predictable 
code on the basis of the static variable and a first dynamic vari- 
able defined by a first interval of time in which the step of 
inputting occurred according to a first clock mechanism; putting 

5 the static variable and the first non-predictable code into a 
second computer independently including the predetermined algo- 
rithm; using the algorithm of the second computer to independently 
calculate two or more second non-predictable godes on the basis of 
the static variable and two or more second dynamic variables de- 

10 fined by two o^r more cells of a second interval of time in which 
the step of putting occurred according to a second clock mechanism, 
the second interval of time comprising a central cell of time and 
one or more bordering cells of time; comparing the first non- 
predictable code with the second non-predictable codes to determine 

15 a match; and, synchronizing the first clock mechanism and the 
second clock mechanism upon comparison and matching of the first 
non-predictable code with one of the second non-predictable codes. 

Ihe step of synchronizing preferably comprises the steps 
of: counting the difference in time between a central cell of time ^ 

20 and a bordering cell of time from which a matching second non- 
predictable code may be generated; summing successive differences 
in time counted during the step of counting; storing the summed 
successive differences in. time; and, shifting the central and 
bordering cells of time by the summed successive differences in 
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time. 

Most pref era±>ly, the step of synchronizing further com- 
prises the steps of: storing the date of the most recent comparison 
and determination of a match; counting the difference in time 

5 between the date stored and the date of present entry into the 
second computer; dividing the difference in dates counted by a 
selected value and prescribing the output as a first window opening 
number; and, calculating as many extra second non-predictable codes 
on the basis of as many extra bordering cells of time immediately 

10 preceding and following the selected number of bordering cells as 
prescribed by the first window opening number. 

Most preferably/ the step of synchronizing further com- 
prises the steps of: sensing a re-setting of the second clock 
mechanism; prescribing and storing the occurrence of a sensed re- 

15 setting of the second clock me<Aanism as a second selected window 
opening number; and, calculating as many additional second non- 
.predictca>le codes on the basis of as many additional bordering 
cells of time immediately preceding and following the extra bor- 
dering cells of time as prescribed by the second window opening 

20 number. 

Ihe volatile dynamic memory included in either or both of 
the first computer, the access control means, the host computer and 
the means for comparing preferably stores and maintains all pro- 
grams such as the predetermined algorithm, system operating pro- 
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grams, cxDde comparison and matching programs, and the like; and the 
volatile dynamic memory further preferably stores, maintains and 
makes available for use all data and results of operations such as 
fixed codes, resultant codes, dynamic variables and the like. 

BRIEP DESOUPTTON OP THE DKAHENGS 
Other objects, features and advantages will be apparent 
from the following detailed description of preferred embodiments 
thereof taken in conjunction with the accompanying drawings in 
vAiich: % 

FIG. 1 ,is a block diagram of a basic apparatus and method 
according to the invention for generating and comparing non-predic- 
table codes; 

FIG. lA is a block diagram of a preferred apparatus and 
method for generating and comparing non-predictable codes where a 
15 means for comparing non-predictable codes is included in a calcula- 
tor which generates a non-predictable code; 

FIG. 2 is a front isometric view of a credit card sized 
calculator for calculating a first non-predictable code for use in 
gaining clearance or access according to the invention; 

20 

FIG. 3 is a flow chart demonstrating a most preferred 
series of steps carried out by an apparatus according to the inven- 
tion and/or in a method according to the invention; and, 

FIGS. 4-9 are diagrammatic representations of series of 
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resultant code cells separately generated by separate computers 
according to exemplary situations described herein; each diagram 
sets forth the relationship slfi. a iiia real time between resultant 
codes generated on the basis of time as kept by separate clock 
S mechanisms in the separate computers generating the resultant codes 
according to the corresponding exemplary conditions described with 
reference to each figure. 

raRTa.TTJ?n msCEOITION OP THE INVEHTICN 
The following discussion describes the most- preferred 
10 embodiments of the invention. 

In accordance with the inv^ition an authorized person is 
provided with a fixed secret code or card seed 10, FIGS. 1, lA, 2, 
3, typically a number, which is unique to that individual. In the 
case of a credit or bank/cash card 20, FIG. 2, that number 10 may 
15 be printed on the card itself sucii that if the authorized owner of 
the card forgets the number, it can be quickly retrieved by refer- 
ence to the card or other permanently printed form of the fixed 
code 10. Where the fixed code/card seed 10 is provided in per- 
manent printed form on or in close connection with the aEjaratus of 
20 the invention there is also preferably provided an additional 
portion of the fixed code 10, a so-<:alled pin 45 (personal identi- 
fication number), which the authorized user memorizes in order to 
further guard against misaH)ropriation of the fixed code/card seed 
10. The fixed code/card seed 10 or pin 45 may alternatively be 
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used to identify an authorized terminal which has been issued by '^'^ 
the authority presiding over the granting of clearance or access. 

Such a fixed and/or memorized code (commonly referred to 
as a pin 45, FIG. 3, or personal identification number) is input 
5 into an access control module ("ACM") or host computer 50, pigs. 1, 
lA, 3 together with the unique static variable 10 and temporarily 
stored within the memory of the host or ACM, step 100, PIG. 3. 

Preferably once the card seed 10 and pin 45 are input into 
the host or ACM 50, each is separately compared against a library 
10 of authorized card pins, step 110, FIG. 3, and a library of 
authorized card seeds, step 120, PIG. 3, stored in the host or ACM 
memory to determine whether there is a match. If either of the pin 
45 or card seed 10 which the user inputs into the host or ACM does 
not produce a match, clearance or access is denied and the card 
15 user must start over in order to gain access or clearance. 

In order to generate a non-predictable code 40, FIGS. 1 - 
3, which will ultimately give the user clearance or access, the 
fixed code or seed 10 and/or pin 45 must be input into a predeter- 
mined algorithm which manipulates the seed 10 and/or pin 45 as a 
20 static variable. Bie algorithm is typically provided to the user 
in the form of a calculator 20, FIG. 2, which is loaded with a pro- 
gram for carrying out the predetermined algorithm. Cie calculator 
20 preferably comprises an electronic computer and most preferably 
comprises a microprocessor having a sufficient amount of volatile 
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la 

dyx^lc memory to store and catry oat the functions o£ the prede- 
termlnea algorithm. n« con^n^er 20 Is -nost prelerably pro^iaed in 
a card 20, FIG. 2, having the appearance and approximate size o£ a 

credit card. 

such credit card sized computer 20, PIG. 2, also pre- 
ferably includes a conventional liquid crystal display 44 for . 
displaying the ultimate non-predictable code 40 generated by the 
algorithm (referred to in PIG. 3 as "card resultant code"). The 
no,^predlct3ble cede 40 thus generated may be visually *served by 
the user for eventual input into a host computer or ACM 50, FIGS. ,. 
1, lA. 3. AS shown in FIG. 2, the preferred form of card computer 
20 has a length I. of about 3.3 inches, a width W of about 2.1 
l^es and a depth D of less than about .07 Inches. In addition or 
as an alternative to providing microprocessor 20 with a liquid 
15 crystal display 45 for visual observation of the first non-pre- 
dictable code 40, computer 20 may Include means for machine reading 
the first non-predictable (or card resultant) code 40 and/or pin 45 
to the ACH or host 50, or may include sound producing or other 
means for personally sensing the first notr-prediclable code 40. 
20 with reference to FIG. 3, after the card and host pins are 

compared ^ found to mat*, step 110, the card seed 10 Is typl«l- 
ly compared against a library of card seeds stored in the host or 
ACH memory in order to determine whether there Is a match, step 
120, FIG. 3. 1£ the card seed 10 input Into the host or ACM 50 
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aoes not match up with one of the seeds stored in the host library, 
access or clearance is deniedr "no" step 120, FIG. 3. 

For purposes of initial explanation the discussion which 
follows with reference to FIGS. 1 and lA assumes an embodiment of 

5 the invention whereby a single resultant code 70 is generated by 
the host or ACH 50. The most preferred embodiment of the invention 
wherein the clock mechanisms which generate the resultant codes 40 
and 70, are synchronized and wherein the host or ACM preferably 
generates a series of resultant, non-predictable codes, as opposed 

10 to a single code 70, is described hereinafter with reference to 
FIGS. 4-9. 

In addition to using the seed 10 ajid/or pin 45 as static 
variables the predetermined algorithm is designed to utilize a 
second variable, a dynamic variable 30, 60, FIGS. 1, lA, to calcu- 

15 late the non-predictable codes 40 , 70 which may ultimately give 
access or clearance 90 to the user. A dynamic variable may com- 
prise any code, trj^'ically a number, which is defined and determined 
by the interval of time in which the card seed 10 and/or pin 45 is 
put into the algorithm of either the card computer 20 or the host 

20 or ACM 50. A dynamic variable is most preferably defined by the 
date and the minute in which the static variable is input into the 
predetermined algorithm. A dynamic variable thus defined can be 
seen to cJiange every minute. The dynamic variable could alterna- 
tively be defined according to any interval of time, e.g., 2 
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minutes, 5 minutes^ 1 hour and the like. Adynamic variable thus 
defined would alternatively change every 1 minute, 2 minutes, 5 
minutes, 1 hour or with the passage of any other predetermined 
interval of time. 

5 With reference to FIG. 1 the most preferred means of 

establishiiig sudi a dynamic variable is via a time keeping means, 
such as an electronic digital clock, which by conventional means 
automatically inputs, steps a^ or cif the date and specific inter- 
val of time (e.g., 1 minuter 2 minutes, 5 minutes, etc.) into the 
10 predetermined algorithm of the card 20 or host or ACM 50 in res- 
ponse to the ihput, step a or c, of the static variable 10 and/or 
pin 45. The date and time thus generated by the time keeping means 
may itself be inE3ependently manipulated according to another pre- 
determined algorithm prior to input into the first predetermined 
15 algorithm of the dynamic variable. The fact that the dynamic 
variable 30 or 60 being input into the predetermined algorithm 
constantly changes in absolute value with passage of successive 
intervals of time of predetermined duration means that the card 
code 40 or host or ACM code 70 generated according to the jaredeter- 
20 mined algorithm is also constantly changing with successive inter- 
vals of time and is thereby completely non-predictable. 

The non-predictability of the codes 40, 70, FIG. 1, gene- 
rated in the manner described above may be enhanced by the fact , 
that the predetermined algorithm (together with the static variable 
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10 and/or pin 45 and dynamic variable 30 input thereinto) are 
preferably stored in the calculator 20 (and/or host or ACM 50) in 
volatile dynamic electronic memory which is encapsulated with an 
energizing means which destroys the algorithm, the card seed 10 , 
and the dynamic variable 30 (or 60) when the electronic memory is 
invaded, interrupted or violated in any way. The predetermined \ 
algorithm thus stored in such volatile dynamic memory cannot be 
discovered by a would-te thief because the entire memory including 
the predetermined algorithm is destroyed upon invasion of the 
memory. 

In a preferred embodiment of the invention therefor the 
card seed 10 is stored in such volatile dynamic memory and by 
conventional means is automatically input step a, FIGS. 1, lA, i^to 
the algorithm of the first computer 20 at regular intervals of 
time. Such automatic inputting of the card seed 10 may thereby 
work in conjunction with the automatic definition and inputting of 
the first dynamic variable 30 into the predetermined algorithm of 
the first conputer 20 to effect completely automatic generation of 
the first non-predictable or resultant code 40 at regular intervals 



20 of time. 



The invention most preferably contemplates providing 
authorized personnel with a card computer 20, FIG. 2, only, but not 
with knowledge of the predetermined algorithm included in the 
ccrr^er 20. Authorized personnel are, therefore, provided with a 
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computer 20 capable of carrying out an algorithm which is unknovm 
to such authorized personnel. 

In the most preferred embodiment of the invention where 
the predetermined algorithm provided to authorized users is stored 
5 in a volatile dynamic memory encapsulated with an energizing means 
which destroys the algorithm upon invasion of the memory, the only 
means of gaining unauthorized clearance or access is to misap- 
propriate possession of the original computer 20 itself and know- 
ledge of the fixed code/card seed 10 (and knowledge df the card pin 
10 45 if employed in conjunction with the invention). 

The algorithm may alternatively be designed to manipulate 
more than one fixed code and/or more than one dynamic variable. 
Several means for lifting each fixed code and dynamic variable 
may be included in the calculator 20 provided to users and in the 
15 host or ACH 50, FIG. 3. Each dynamic variable is preferably de- 
fined by the interval of time in which one or more of the fixed 
codes/card seeds are ii^xit into the algorithm. 

It can be seen, therefore, that the predetermined algo- 
rithm can comprise any one of an infinite variety of algorithms. 
The only specific requirement for an algorithm to be suitable for 
use in the present invention is that such algorithm generate a non- 
predictable code on the basis of two classes of variables, static 
variables (the fixed codes) and dynamic variables such as des- 
cribed hereinabove. A non-predictable code C which is ultimately 
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generated by the predetermined algorithm, f (x^y), may be expressed . 
mathematically as: 

f (Xry) = C 

where x is a static variable/fixed code and y is a dynamic vari- 
able. Where several (n) static variables (x^, xj, -..Xn) and 
several (n) dynamic variables (yj^, •••Yn^ intended for use 
in generating non-predictable codes, a non-predictable code thus 
generated may be expressed mathematically as f (xj, X2f —Xn/ yi^ 

The specific form of the algorithm only assumes special 
in^ortance as part of the invention, therefore, when the algorithm 
is capable of being discovered by would-be unauthorized users. In 
the most preferred embodiment of the invention where the algorithm 
is completely undiscoverable by virtue of its storage in a volatile 
15 dynamic electronic memory which destroys the algorithm upon at- 
tempted invasion of the encapsulated memory, the specific form of 
the algorithm comprises only an incidental part of the invention. 
The mere fact of the use of some algorithm to manipulate the fixed 
code and the dynamic variable does, however, comprise a necessary 
part of the invention insofar as such an algorithm generates the 
ultimately important non-predictable code. 

As the term "fixed code" or "card seed" or "seed" is used 
herein such terms include within their meaning numbers, codes, or 
the like which are themselves manipulated or changed, mathematiccil- 
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ly oc otherwise, In some non-dynamic manner prior to or during the 
generation of a second non-predictable code 40 r PIG. 3. The first 
20 or second computer 50 may, for example, be provided with a 
static program/algorithm utilizing the fixed code or seed as a 

5 variable and generating a new fixed code or seed which is ultimate- 
ly input as the fixed code or seed 10 variable in the secret 
algorithm which generates the non-predictable codes, for example, 
for purposes of added security, a fixed code or seed 10 may be 
first added to another number and the result thereof used as the 
' 10 fixed code or seed 10 used to generate the non-predictable codes. 
Thus, the term 'fixed code or seed includes within its meaning the 
result of any non-dynamic operation performed on any fixed code or 
seed. It can be seen, therefore, that essentially any algorithm or 
operation may be performed on the fixed code 10 to generate another 

15 fixed code or seed, the algorithm or operation most preferably 
comprising a static algorithm or operation, i.e., one not utilizing 
dynamic variables so eis to generate a static result. 

With reference to PIG. 1, after a first non-predictable 
code 40 is generated as described above, sudi first non-predictable 

20 code 40 is compared BO with the "second" non-predictable code 70 
which Is also generated by the user by putting, step c, the fixed 
code/card seed 10 (and the pin 45, if employed) into the host or 
ACK 50 which contains the same predetermined algorithm used to 
generate the first non-predictable code 40. 
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With reference to FIG. lA, (a schematic diagram which 
assumes the host or ACM 50 includes the predetermined algorithm and 
the mechanism for comparing and matching the noir-predictable codes) 
the first non-predictable code 40 is putr step i^to the host or 
ACM 50 essentially immediately after the fixed secret code 10 is 
put into the host or ACM 50 (i.e., step e2 is carried out essen- 
tially immediately after step e) in order to gain clearance or 
access 90* If steps e and e2 riot carried out within the same 
interval of time as steps a and aj. ^ were carried outr (i.e., the 
same interval of time on which code 40 is based) r then the host or 
ACM will not g'enerate a second dynamic variable 60 which will allow 
the predetermined algorithm of the host or ACM 50 to generate a 
second non-predictable code which matches the 1st non-predictable 
code 40. 

The necessity for carrying out steps e and FIG, lA, 
within the same minute or other selected interval of time ("cell") 
is deviated in a most preferred embodiment of the invention. With 
reference to FIGS. 3-4, the card 20 generates a resultant code 
40 r on the basis of a cell of time in which the code 40 was 
generated as defined by the card clock. Assuming for the sake of 
explanation that the card clock and the host or ACM clock 125 are 
synchronized with each other and with real time and assuming the 
user inputs the correct card seed 10 and resultant code 40 into the 
host or ACM 50 within the same cell of time as the resultant code 
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40 was generated by the card 20 the host 50 is preferably provided 
with a program which generates a series or "window" of resultant 
codes (as Ofposed to a single non-predictable code 70, FIG. 1). [As 
used hereinafter/ the term "cell" is, depending on the context, 

5 intended to refer to an interval of time of predetermined duration 
on which the generation of a resultant code is based or to the 
resultant code itself*] The various second non-predictable codes 
which comprise the "window" are calculated by the host or ACM 50 on 
the basis of the cell of time in which the user correctly entered 
. 10 the seed 10, code 40, and pin 45 into the host or ACM 50 as defined 
by the host clock 125, FIG* 3, and one or more bordering cells of 
time, e.g., -2, -1, and +1, +2 as shown in FIG. 4. An ACM or host 
computer 50 program then compares the card resultant code 40 with 
all of the individual resultant codes computed as the window of 

15 host cells shown in FIG. 4 to determine whether there is a match 
between any of the host cells and the card code 40. In the example 
stated, the card code 40 will of course match \xp, step 172, FIG. 3, 
with the zero cell based host code, FIG. 4 because the user input 
the seed 10, pin 45 and code 40 within the same cell of time as the 

20 card code 40 was generated. 

[As used hereinafter, "input" or "inputting" or "entry" 
into the host or ACH 50 refers to input of the correct card seed 
10, card resultant code 40 and card pin 45 into the host or ACM 50 
and positive matching of the card seed 10, step 120, FIG. 3, and 
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card pin 45 , step 110, with a host seed and host pin which are 
stored in the permanent memory in the host or ACM 50]. 

Assuming in the example stated above with reference to 
FIG. 4, however^ that the user had input the card code 40 and seed 
5 10 (and pin 45), FIG. 3, one minute later than the card had 
generated the code 40, the host or ACM 50 will have generated a 
different window of codes as shown in FIG. 5; that is, the host 
will have generated a central cell correspoding to a +1 cell code 
(based on real time) as if the +1 cell code is the zero cell of the 
10 window of cell (as shown in parenthesis in FIG. 5) and further 
generate the predetermined number of bordering cell codes (e.g., 
real time -1, 0 and +2, +3 as shown in PIG. 5). Thus although the 
user inputs the card seed 10 and the card resultant code 40 into 
the host or ACM 50 one minute late, the host computer 50 still 
15 generates a matching cell code, the real time zero cell code which 
"borders" the central cell, i.e., the +1 central cell code as shown 
in parenthesis' in, FIG. 5. 

Provision of the host or ACM 50, FIGS. 3-5 with a 
mechanism for generating a series or window of second non-predict- 
20 able codes, as opposed to a single second code 70, FIG. 1, thereby 
allows a card user a selected amount of leeway of time (beyond the 
time length of the interval of time on which code 40 is based) in 
which to input a correct seed 10, pin 45 and card code 40 into the 
host or ACM 50 and still generate a matching host resultant code. 
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rtxe examples stated above assumed that the card clock and 
the host clock 125, FIG. 3 were both synchronized with real time. 
Assuming the card clock and the host clock remain synchronized at 
all times, it would only be necessary to provide the host or ACH 50 
5 with a mechanism for generating a selected number of bordering 
cells which -precede- the central cell of the window, e.g., with 
reference to FIG. 5, the (-2), (-1) r (0) cells. In those 
applications where the card clock and the host clock are, jnaintained . 
in synchrony with each other at all times, the host or ACM clock 
10 125 preferably defines only two dynamic time variables so as tc- 
generate a central cell code and a -1 host window cell code, SuA 
embodiment allows the user to input to seed 10, pin 45 and code 40 
one cell code late but only one cell code late for security 
erihanc€iTient ♦ 

15 in the more typical case, however, where the card clock 

and the host clock 125 may be cut of synchrony with real time, 
e.g., where the card clock is running fast relative to the host 
clock, the generation of cells which "follow" the c^tral cell of 
the host window may be required to generate a matching host resul- 

20 tant code. 

With reference to FIGS. 3, 6 the invention most preferably 
provides a me<3ianism for synciironizing the card and host clocks in 
the case where su<± independent clocks more topically run fast or • 
slow relative to real tiir.e and/or relative to each other. 
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Ihe following examples assume for purposes of explanation 
that the time equivalent length of all cell codes are one minute in 
duration. Assuming that the card clock is one minute slow and the 
host clock 125,. FIG, 3 is correct relative to real time, the card 
5 will generate a resultant code 40 based on a real time of -1 minute 
(relative to the host clock 125) and, if the user inputs the card 
resultant code 40 (and the correct seed 10 and pin 45) into the 
host or ACM 50 within the same minute as the code 40 is generated, 
the host or ACM 50 will generate a window of -resultant codes ac- 
10 cording to the series of cells shown in FIG* 6 (assuming the prede- 
termined number of bordering cells is selected as 2 cells im- 
mediately preceding and 2 cells immediately following)* Matching 
resultant codes, i.e., the card -1 cell code and the host -1 cell 
code, will thus have been generated. 
15 Although the card clock was one minute slow in the example 

just described, the host computer is provided with a program 
mechanism which will automatically adjust (i.e., synchronize) the 
host clock time with the card clock time when the card user next 
enters a correct card seed 10 and card pin 45 (and code 40) into 
the host or ACM 50. The host accomplishes sucii synchronization by 
storing a difference in matching cell time in the permanent memory 
of the host, step 190, FIG. 3; e.g., in the example just described, 
the last matching transaction, step 180, FIG. 3 fell in the -1 cell 
of the host "window" as shown in parenthesis in FIG. 6. Such cell 
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time difference is referred to herein as the "time offset" which is 
stored in the permanent host nemoryr step 190, FIG, 3. The time 
offset is the difference in time between the central cell and the 
bordering cell from which a matching second non-predictable code 
was generated. 

Upon the next entry of the card user into the host 50 
(assuming the card clock has not run any slower since the last 
entry and assuming the host clock has remained synchronized with 
real time and assuming the user next enters the host 50 within the 
same minute as the card generates resultant code 40), the host- 
computer 50 will automatically algebraically add the stored time 
offset, steps 135, 140, PIG. 3, to the temporarily stored host clock 
time, step 130, and generate the series of relative real time host 
cell codes shown in FIG. 7 wherein the card code cell which is one 
minute slow in real time, is now treated in the host window as a 
zero cell (as shown in parenthesis in FIG. 7), i.e., the central 
cell of the host window of cells r is adjusted to subtract one minute 
therefrom,, via subtraction of the one-minute stored time offset -135, 
FIG. 3. As shown in FIG. 7, the bordering cells of the host window 
are similarly adjusted by the one-minute stored time offset. Fur- 
ther, in all future entries by the user into the host 50 r the 
temporarily stored time and date of entry, step 130, FIG. 3, will be 
adjusted by the permanently recorded one-minute stored time offset. 

As to the example described above with reference to FIG. 5 
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whecein the card and host clocks were assumed to be synchronized 
with real time and wherein the user entered the host one minute 
late, it is noted that even though the host clock was synchronized 
with real time, the host will nevertheless compute a time offset, 
step 180, FIG. 3r to be stored, step 190, and used in adjusting 
the temporarily stored time of entry, step 130, FIG^ 3, in future 
transactions by the user, because the matching cell of the host 
window, as shown in parenthesis FIG. 5, was not the central cell 
code of the window (i.e., was not the real time~+l cell code) but 
rather was a bordering real time cell code, i.e«, the bordering 
real time zero cell code. 

Simply stated, therefore, a stored time offset' will be 
computed step 180, FIG. 3, and stored, step 190, FIG. 3# for use in 
adjusting the time of entry into the host in all future entries, 
step 140, FIG. 3r whenever on a given entry, step 130, FIG., 3, a 
•Ordering" cell code of the host window (as opposed to the central 
cell code) produces a match with the input card resultant code 40, 

In storing, step 190, FIG. 3, a time offset which is 
computed, step 180, during any given transaction, the presently 
computed time offset is algebraically added or summed to any time 
offsets previously computed and stored as a result of previous 
entries and grantings of access, step 173. 

Inasmuch as a clock mechanism, once beginning to run fast 
or slow, will continue to run fast or slow during all future uses 
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Of the system of the invention, the host or ACM 50 will add or 
subtract all time offsets recorded during successive uses of the 
system to the stored time of fs€t<s) recorded and permanently stored 
from previous transactions, step 180, FIG. 3. Most preferably, a 
newly computed time offset vill not be permanently stored, step 
190, in the host or ACM memory 200, unless and until access or 
clearance has already been granted, step 173. 

As described and shown in the examples of FIGS. 4 - 7 the 
host or ACM is typically programmed to compute four (4) cell codes 
bordering the central cell code (i.e., two cells immediately pre- „. 
ceding and tw6 cells immediately followij^g the central cell) as the 
"window" within which the user is allowed to deviate in inputting 
the card seed 10, the pin 45, and, the card resultant code 40 into 
the host or ACM. Such bordering cells have been described as 
corresponding to codes corresponding to one-minute intervals. It 
is noted that the number and time equivalent length of the bor- 
dering cells may be increased or decreased as desired. 

The absolute degree by which the card clock and the host 
or ACM clock 125 may run fast or slow relative to real time typi- 
cally increases with the passage of time. For example, if the card 
clock is running slow by 30 seconds per month and the host clock is 
running fast at 30 seconds per month, the two clocks will run the 
time equivalent of one minute out of synchrony after one month, two 
minutes out of synchrony after two months, three minutes out of 
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synchrony after three months, etc. If the authorized card user 
uses the card each month, the automatic synchronizing means des- 
cribed above with reference to FIGS. 4-7 will have adjusted the 
host or ACM time window upon each usage to account for such lack of 
synchrony with real time. If, however, the card user does not 
actually use the card for, for example, six months, the card clock 
and the host clock will be six minutes out of synchrony, and even 
if the user correctly uses the system by inputting the pin 45, card 
seed 10 and card code 40, FIG. 3, into the host or ACM within the 
same minute (or other selected time cell interval) as the pin 45, 
the seed 10 and code 40 were generated by the card, the user would 
not be able to gain access or clearance (i.e., cause the host or 
ACM to generate a matching resultant code) in the typical situation 
where the "window" of bordering cell times is selected as two one- 
minute cells immediately preceding and two one-miniute cells im- 
mediately following the central host cell. FIG. 8 depicts such an 
exemplary situation as just described, wherein it can be seen that 
the card clock, after six months of non-usage, generates a resul- 
tant code 40, FIG. 3, which is based on -3 minutes in real time, 
and the host clock, after six months of non-usage, causes the 
generation of the typically selected five cell window comprising 
cell codes corresponding to +1. +2. +3, +4. and +5 minutes in 
relative real time. In the tN-picsl case, therefore, where the 
selected window comprises four bordering cells, matching second 
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norr-predictable cxx3eB will not be generated under any circumstances 
after six months of non-use. 

The invention most preferably provides a mechanism by 
which the host window of bordering cells is opened wider than the 
5 preselected window by an amount which varies with the length of 
time of non-use of the card* Such window opening is accomplished 
by storing the most recent date of comparison and matching/ 
determing the difference in time between such date,jmd the present 
date of entry into the second computer and calculating as many 
10 additional bordering cells as may be predetermined according to^the 
difference in 'time between the dates. 

Typically the window is opened by two one minute bordering 
cells per month of non-use (e.g., one cell immediately preceding 
and one cell immediately following the preselected window) but the 
15 number of cells by which the window is opened and the time equiva- 
lent length of each cell may be predetermined to coc^ise any other 
desired number and length. 

Assuming the exemplary situation described above where the 
card clock and the host clock 125, FIG. 3, are running slow and 
20 fast respectively by 30 seconds per month and the user has not used 
the card for six months r the host or ACM compares, step 150, the 
temporarily stored date of the present entry, step 130, with the 
permanently stored date of the last access, step 175. cind con^Hites 
the number of months X, step 160, between the date of last access 
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and the date of present entry. In the present example six months 
of non-use is calculated step 160/ FIG. 3, and the window is opened 
by six additional one-minute bordering cells on either side of the 
preselected four cell window as shown in FIG. 9 to give an overall 
window of sixteen minutes. TSie card resultant code 40 based on -3 
minutes in relative real time thus matches, step 172, FIG. 3A, as 
shown in FIG. 9 with the -6 host bordering cell code (-3 in real 
time) and access or clearance is ultimately granted. As described 
above with reference to FIGS. 4-7, because the matching host cell 
code is a bordering cell code of the host window and not the 
central host cell (i.e., the zero cell), a new stored time offset 
of -6 minutes will be computed (i.e., added to the permanently 
stored time of f set) , step 180, FIG. 3, and stored, step 190, and 
the host clock thereafter will adjust the zero cell of the host 
window {and accompanying bordering cells) each time the user of the 
card having the particular card seed 10 and pin 45 which was used 
in the present transaction uses the card to gain access in future 
transactions. 

Lastly the invention further includes a failsafe window 
opening mechanism^ to provide for the contingency v*iere the host or 
ACM 50 and its clock 125, FIG. 3, may shut down between card 
usages. In the event of such a shut down, the host or ACM clock 
125 must topically be reset and re-siTichronized, and in the course 
of such re-setting an error may be made in the resynchronization. 
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In order to insure that the card user may reasonably gain access in 
the event of such an error in re-setting the host clock 125, the 
host or ACM 50 is preferably provided with a meciianisin for sensing 
such a rfr-setting and for storing a predetermined window opening 
number upon each re-setting of the host or ACM 125. Such window 
opening nuniber is typically selected as six additional one-minute _ 
bordering cells (e^., three additional cells immediately preceding 
and three additional cells immediately following the existing win- 
dow) but may be selected as more or fewer cells of other selected 
length. 

The re-setting window opening number is typically added, 
step 165, FIG. 3, to the result of non-usage step 160 and the total 
additional number of cells comprising the window is computed, st^ 
170, FIG. 3, i.e., all bordering cells surrounding the central cell 
are computed including (a) the preselected window allowing for user 
delay in inputting and/or card and host clock asynchrony/ (b) the 
non-usage window allowing for card and host clock asyndirony over 
long periods of time of non-usage and (c) the le-setting window 

opening number. 

Assuming the exemplary situation described above with 
reference to FIG. 9, if the host or ACM had shut down within the 
six month period of non-use, the host window as depicted in FIG. 9 
would be further opened by an additional six bordering cells such 
that -11, -10, -9 and +9, +10, +11 host window cells would also 
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have been computed, step 170 r FIG. 3r and made available for com- 
parison and potenticd matching with card resultant code 40 in step 
172, FIG, 3, As described with reference to FIGS. 5-9, where a 
new time offset is computed and stored* steps 180. 190/ FIG. 3, as 
a result of a match found in a bordering cell of a window generated 
by virtue of non-usage and/or the preselected window, a new time 
offset will similarly be computed and stored, steps 180, 190, if a 
match is found in a bordering cell generated as a result of shut- 
down. 

Unlike the non-usage window opening number, the re^set 
window opening number is typically stored in the permanent memory 
200 of the host or ACM 50, FIG. 3, such that once the host clock 
125 is re-set, the selected window opening number is available in 
permanent memory 200 to open the window upon the next attempted 
entry by the ^t. Al >ugh the re-set window opening number is 
established arid stored in permanent memory 200, such re-set window 
opening number is preferably eventually closed down or eliminated 
for security enhancement after it is established upon successive 
attempted entries by a variety of card users that the host clock 
125 was correctly reset or after the host clock 125 is otherwise 
re-synchronized with real time to correct any errors which may have 
occurred as a result of the re-setting. The use of the re-set 
window opening number is, therefore, preferably tenporary. 

In the practical application of the invention, many cards 
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are issued to many users and each card includes its own card clock. 
Recognizing that the average of the times being kept by the indi- 
vidual clocks of a statistically significant sample of a variety of 
cards, will produce an accurate or very nearly accurate representa- 
tion of real time, the invention most preferably includes a 
mechanism for permanently adjusting the time kept by the host clock _ 
125, FIG. 3, after the clock 125 has been re-set, to the average of 
the times of entry (after re-setting of the host'clock 125) of a 
selected number of different cards or card users. For example, 
assuming that host clock 125 has been reset, the next ti^e of "^try 
of the next five (or other selected number of) separate card users 
is averaged, the host clock 125 is permanently adjusted or re- 
synchronized to such an averaged time, and the re-set window 
opening number is thereafter eliminated from the permanent host 
memory 200. B«djusting or r^syncixronization of the host clock 
125 to the averaged time of the card clocks is typically carried 
out by the host 50 by computing another master time offset which is 
algebraically added to the time offsets peculiar to each card 20. 
The computation of such a master offset assumes that a selected 
number of separate cards 20 were able to gain access, step 173, FIG. 
3 as a result of the re-set window opening or otherwise. The 
average of the time of f sets computed as to the selected number of 
cards which enter the host 50 (after the host clock 125'is re-set) 
is preferably stored as a master time offset (i.e., as a re-syn- 
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chronization of the host clock 125), the re-set window opening 
number is then eliminated as to all future entries by card users, 
and the master time offset is used (in addition to permanently 
stored time offsets peculiar to each card) to adjust the card clock 
125 in transact i9ns as to all card entries thereafter • 

As a practical matter, a limit is typically placed on the 
total number of bordering cells by which the window is opened 
regardless of the length of time of non-usage by the card user or 
the number of times the host or ACM 50 is reset as a result of re- 
setting of clock 125* For security reasons, such a limit is ty- 
pically selected as ten one-minute bordering cells — as stated in 
step 170, PIG. 3 the number of codes comprising the window are the 
lesser of (a) 4 bordering cell codes, the preferred selected win- 
dow, plus X, the number of months or other selected non-usage 
perior:s, plus Y, the shut down window opening number, or (b) 10, 
the maximum number of additional cell codes. Such a maximum window 
may, of course, be selected as more or less than 10 depending on 
the degree of security desired. 

It is noted that FIG. 3 depicts a preferred sequence of 
operations and not necessarily the only sequence. Steps 110 and 
100 could, for example, be interchanged or, for example, the step 
of automatically inputting the re-set window opening number, step 
167 could precede any of steps 140 - 160. 

The host or ACM 50, FIGS. 1. lA, 3, typically includes one 
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or more programs and sufficient memory to carry out all of the 
steps shown in FIG. 3, cathough one or more of those functions may 
be carried out by a device separate from and communicating with or 
connected to the host or ACM 50. 

With respect to the computation, storage and retrieval of 
time offsets, the host or ACH 50 is provided with mechanisms for 
recognizing, storing, retrieving and computing time offsets which 
are peculiar to each card seed 10 and/or pin 45 and responsive to 
the input of the same into the host or ACM 50. 

FIG. 2 depicts the most preferred form of the calculator 
20 which is provided to authorized users for generating the first 
non-predictable or card resultant code 40. As shown in FIG. 2 the 
calculator 20 is of substantially the same size as a conventional 
credit card and includes a conventional liquid crystal display 44 
for displaying the code 40 to the user. Hie credit/card computer 
20, FIG. 2, may bear the identity of the card seed/fixed code 10 
printed on its face, and includes a digital clock means, an energi- 
zing means, a microprocessor and sufficient memory for storing the 
predetermined secret algorithm, a program for generating a dynamic 
variable if desired, and the card seed 10 and pin 45 if desired. 

In an embodiment of the invention where the goal is to 
grant access to a physical facility, the ACH 50 may comprise a 
portable device such that it may be carried by a security guard 
stationed at a central access location leading to a guarded 
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building or other facility. A security guard thUB in possession of 
such an ACM would typically read the card seed 10 and the non- 
predictable code 40 appearing on the card 20, FIG. 2, of authori2ed 
person and input such codes 10, 40 (in addition to the pin 45 — 
otherwise provided to the guard by the card bearer) into the port- 
able ACM 50 to determine whether the card bearer is truly in pos- 
sessiOT of a card 20 which was issued by the authority establishing 
the secret predetermined algorithm. 

As described herein protection of the secrecy of the 
predetermined algorithm is preferably accomplished in the ccdculck- 
tors provided to authorized personnel by virtue of its storage in 
volatile dynamic memory and encapsulation with a volatile dynamic 
energizing means. With respect to the algorithm provided In the 
ACM secrecy may be maintained in a similar manner or other convex^- 
tional manner, e.g., by physically guarding the ACM or requiring 
additional access/user codes to gain direct access. Where all 
programs, data and results of operation are stored in such volatile 
dynamic memory, the same are similarly protected against invasion. 

Although the invention contemplates some form of communi- 
cation of the result of operation 40 carried out on the card 20, 
FIG. 2, to the host or ACM 50 or any other electronic device, a 
talking between the computer 20 and the host 50 is not required or 
conteir.plated by the invention. Therefore, after the first computer 
20 has calculated the first non-predictable code 40 and the code 40 
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has been input into the host 50, no other information need be 
communicated back to the first computer 20 from the host 50 or 
arjother device in order to gain clearance or access. 

Lastly it is noted that the fixed code or seed 10 and/or 
pin 45# FIG. 3, may be employed to identify a ctsnputer terminal or 
other piece of equipment or device as opposed to a card 20- For 
example, a terminal or a space satellite or other device may be 
provided with a computer 20 which is assigned a code or seed 10 
and/or a pin 45 (and, of course, provided with" the secret predeter- 
mined algorithm and a clock and conventional electronic mechanisms 
for computing the code 40 and inputting the code 10, pin 45, and 
resultant code 40 to the host or ACM 50) in order to identify such 
terminal, satellite or the like in the same manner as a card compu- 
ter 20 is identifiable as described hereinabove. 

It will now be apparent to those skilled in the art that 
other embodiments, improvements, details, and uses can be made 
consistent with the letter and spirit of the foregoing disclosure 
and within the scope of this patent, which is limited only by the 
following claims, construed in accordance with the patent law, 
including the doctrine of equivalents. 
What is claimed is: 
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1 1. In a system for comparlrjg and matching non-predictable 

2 codes generated by separate computers on the basis of dynamic 

3 variables defined by separate clock means according to time, an 

I apparatus for synchronizing the time definition of the dynamic 

5 variables comprising: 

6 a first computer for calculating a first non-predictable 

7 code according to a predetermined algorithm, the algorithm genera- 

8 ting the first non-predictable code on the basis of a first dynamic 

9 variable and a unique static variable; 

10 a first clock means for automatically defining the first 

II dynamic variable according to a first interval of time in which the 

12 static variable is input into the algorithm, the first interval of 

13 time having a first predetermined duration; 

1^ a second computer for calculating two or more second non- 
15 predictable codes according to the predetermined algorithm, the 

16 algorithm generating the second non-predictable codes on the basis 

17 of the two or more second dynamic variables and the unique static 

18 variable; 

15 a second clock means for automatically defining the two or 

20 more second dynamic variables according to two or more cells of a 

21 second interval of time in which the static variable is input into 

22 the algorithm of the second computer, the second interval of time 

23 comprising a central cell of time having a predetermined duration 
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24 and one or more cells of time bordering the central cell of time, 

25 each bordering cell of time having a predetermined duration; 
means for comparing the first non-predictable code with 

the second non-predictable codes to determine a matdi; and, 

means for automatically synchronizing the first clock 
means and the second clock means upon comparison and matching of 
the first non-predictable code with one of the second non- - 
31 predictable codes. 

1 . 2. The system of claim 1 wherein the central cell of time 

2 comprises the date and the minute in which the unique static 

3 variable is iijput into the second computer as defined by- the second 
L, clock means. 

1 3. The system of claim 2 wherein the bordering cells of 

2 time comprise a cell of time comprising the date and the minute 

3 inmediately preceding the central cell. 
4. The system of claim 1 wherein the means for 

2 synchronizing catprises: 

3 counting means for counting the difference in time between 
U a central cell of time and a bordering cell of time from which a 

5 matching second non-predictable code may be generated? 

6 summing means connected to the counting means for summing 

7 successive differences in tine counted by the counting means; 

8 storage means connected to the summing means for storing 

9 the output of the stHraning means; and. 
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10 shifting meane connected to the storage means for shifting 

11 a central cell and bordering cells of time by the summed times 

12 stored in the storage means. 
5, Ttie system of claim 4 wherein the bordering cells of 

2 time comprise a selected number of cells of time immediately 

3 preceding the central cell and a selected number of cells of time 

4 immediately following the central cell. 

1 6. The system of claim 5 wherein the central and 

2 bordering cells of time are selected to t>e one minute in duration. * 

1 7, The system of claim 5 wherein the means for 

2 synchronizing further comprises i 

3 second storage means connected to the comparison meams for 
^ storing the date of the most recent comparison and matdiing by the 

5 cocrparison means; 

6 second counting means connected to the second storage 

7 means for counting the difference in time between the date stored 

8 and the date of present entry Into the second computer; 

9 dividing means connected to the second counting means for 
dividing the difference in time counted by the second counting 
means by a selected value and prescribing the output as a first 

12 window opening nixnber; 

13 window opening means connected to the dividing means arv3 

14 the comparison means for calculating as many extra second non- 
15 predictable codes on the basis of as many extra bordering cells of 
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15 time immediately preceding and following the selected number of 

17 bordering cells as prescribed by the first window opening number, 

1 8. The system of claim 7 wherein the means for 

2 synchronizing further conprises: 

3 sensing means connected to the second clock means for 
^ sensing a re-setting of the second clock means; 

5 third storage means connected to the sensing means for - 

6 prescribing and storing the occurrence of a sensed re-setting of 

7 the second clock means as a selected second wiridow opening number; 

8 ar>^ 

g second window opening means connected to the third storage 

10 means for calculating as many additional second non-predictable 

11 codes on the basis of as many additional bordering cells of time 

12 immediately preceding and following the eactra bordering cells of 

13 time as prescribed by the second window opening number. 

1 9. The system of claim 8 wherein the first computer 

2 comprises a microprocessor wherein the algorithm is stored in 

3 volatile dynamic memory encapsulated with an energizing means which 
U when interrupted destroys all data including at least the algorithm 
5 and the static variable. 

1 10. Ihe system of claim 9 wherein the first computer and 

2 the first clock means are incorporated into a card of about the- 

3 same size as a credit card. 

1 11. The system of claim 10 wherein the algorithm of the^ 
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2 second computer is stored in volatile dynamic memory encapsulated 

3 with an energizing means which when Interrupted destroys all data 

4 including at least the algorithm and the static variable. 

1 12. In a method for comparing non-predictable codes 

2 generated by separate computers on the basis of dynamic variables 

3 defined by separate clock means according to time wherein the codes 

4 match when the dynamic variables match, a method for synchronizing - 

5 the time definition of the dynamic variables comprising the steps 

6 of: 

7 inputting a static variable into a first computer 

8 including a predetermined algorithm; 

9 employing the algorithm of the first computer to calculate 

10 a first non-predictable code on the basis of the static variable 

11 and a first dynamic variable defined by a first interval of time in 

12 which the step of inputting occurred according to a first clock 

13 means; 

putting the static variable and the first non-predictable 

15 code into a second computer independently including the predeter- 

16 mined algorithm; 

^7 using the algorithm of the second computer to indepen- 

18 dently calculate two or more second non-predictable codes on the 

19 basis of the static variable and two or more second dynamic vari- 

20 ables defined by two or more cells of a second interval of time in 

21 which the step of putting occurred according to a second clock 
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means, the second interval of time comprising a central cell of 
time and one or more bordering cells of time; 

comparing the first non-predictable code with the second 
non-predictable codes to determine a match; and, 

synchronizing the first clock means and the second clock 
means upon comparison and matching of the first non-predictable 
code with one of the second nonr-predictable codes. 

13, ihe method according to claim 12 wherein the step of 
synchronizing conprises the steps of: 

counting the difference in time between a central cell of 
time and a bordering cell of time from which a matciiing second non- 
predictable code may be generated; 

summing successive differences in time counted during the 

step of counting; 

storing the sutnied successive differences in time; and, 
shifting the central and bordering cells of time by the 
Eurened successive differences in time. 

14. Bie method according to claim 13 wherein the st^ of 
synchronizing further ccni>rises the steps oft 

storing the date of the most recent comparison and 

determination of a match; 

counting the difference in time between the date 
stored and the date of present entry into the second ccirputer; 

dividing the difference counted during the step of 
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8 counting the difference In dates by a selected value and 

9 prescribing the output as a first window opening nunfcer; and, 

10 calculating as many extra second non-predictable 

11 codes on the basis of as many extra bordering cells of time 

12 immediately preceding and following the selected number of 

13 bordering cells as prescribed by the first window opening nuit)er. 

1 15. The method according to claim 14 wherein the step of 

2 synchronizing further comprises the steps of: 

, 3 sensing a re-setting of the secor>a clock means; 

4 0 prescribing and storing the occurrence of a sensed 

5 re-setting of the second clock means as a second selected window 

6 opening number; and, 

7 calculating as many additicHial second non-predictable 

8 codes on the basis of as many additional bordering cells of time 

9 immediately preceding and following the extra bordering cells of 

10 time as prescribed by the second window opening nunber. 

1 16* The method of claim 12 wherein the central and 

2 bordering cells of time are selected to be one minute in duration, 

r 
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17. A system according to any one of claims 9 to 11 
wherein said first computer includes means for visually 
displaying the non-predictable code currently being 
generated by said microprocessor • 

18. A system as claimed in claim 10 wherein said card 
has a length of approximately 3.3 inches, a width of 
approximately 2.1 inches, and a depth of less than 
approximately .07 inches. 

19. A system as claimed in claim 17 wherein said 
means for visually displaying is a liquid crystal 
display. 
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